CVE Watch—

CVE-2024-3393

Palo Alto Networks PAN-OS Malicious DNS Packet Vulnerability

CVSS

—

No CVSS

EPSS

28.6%

p98

KEV

YES

Dec 30, 2024

Exploit Today

0-100

Published: — · Last modified: —

EPSS · 30d

26.6%EPSS · 30 days28.6%

2026-08-022026-08-31

KEV catalog record

Product

Palo Alto Networks / PAN-OS

Vulnerability

Palo Alto Networks PAN-OS Malicious DNS Packet Vulnerability

Added to KEV

Dec 30, 2024

Remediate by

Jan 20, 2025

Known ransomware use

Summary description

Palo Alto Networks PAN-OS contains a vulnerability in parsing and logging malicious DNS packets in the DNS Security feature that, when exploited, allows an unauthenticated attacker to remotely reboot the firewall. Repeated attempts to trigger this condition will cause the firewall to enter maintenance mode.

Required action

Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.

Notes

https://security.paloaltonetworks.com/CVE-2024-3393 ; https://nvd.nist.gov/vuln/detail/CVE-2024-3393

Related CVEs

CVECVSSEPSSKEVRExploitTitleMod.

CVE-2024-94747.2 HIG

99.9%

KEV—80Palo Alto Networks PAN-OS Management Interface OS Command Injection Vulnerability28d CVE-2024-00129.8 CRI

100.0%

KEV—80Palo Alto Networks PAN-OS Management Interface Authentication Bypass Vulnerability28d CVE-2019-15798.1 HIG

98.7%

KEV—80Palo Alto Networks PAN-OS Remote Code Execution Vulnerability20d CVE-2024-3400—

100.0%

KEV—80Palo Alto Networks PAN-OS Command Injection Vulnerability—CVE-2025-0108—

99.9%

KEV—80Palo Alto Networks PAN-OS Authentication Bypass Vulnerability—CVE-2017-15944—

99.9%

KEV—80Palo Alto Networks PAN-OS Remote Code Execution Vulnerability—